DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fc9664f2ff8dc7813794548f39b8eb60_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc9664f2ff8dc7813794548f39b8eb60_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fc9664f2ff8dc7813794548f39b8eb60_JaffaCakes118
Size
86KB
MD5
fc9664f2ff8dc7813794548f39b8eb60
SHA1
e5836b9da678b31ef2374238692d1c779c664c1c
SHA256
3e0ca1f6edfa2f8b4717ba1322d429fa59b3b560f6fe29233aa8c7feea08efa4
SHA512
5eb7c5c002326e845d61a47226b417520675b5cce72231a5eaef11a0af0f32f90671215eb6dfa968af6c4a18de563bb8abd999bad52632e37133aa58ce4d550e
SSDEEP
1536:DypiztjexaPlgs6lEo5j4DJRPl447B/n+3eStA7ye/dMri95aXfXJEa+xdunmoa:IipJPLeb5jwJL447BG3eStA7NdM+9sXM
Checks for missing Authenticode signature.
resource |
---|
fc9664f2ff8dc7813794548f39b8eb60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE